Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for Juniper Screen Protection Settings #92

Closed
pp82 opened this issue Jan 21, 2021 · 1 comment · Fixed by #103
Closed

Add support for Juniper Screen Protection Settings #92

pp82 opened this issue Jan 21, 2021 · 1 comment · Fixed by #103
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@pp82
Copy link

pp82 commented Jan 21, 2021

Hello,
Thank you so much your work excellent work on this provider.

If possible, could we request support for the following juniper screen protection settings. These settings might also be beneficial for other users.

Appreciate you considering this request.

set security zones security-zone externalzone screen external-screen

set security screen ids-option external-screen icmp flood threshold 3000
set security screen ids-option external-screen icmp icmpv6-malformed
set security screen ids-option external-screen icmp ip-sweep threshold 1000
set security screen ids-option external-screen icmp ping-death
set security screen ids-option external-screen ip bad-option
set security screen ids-option external-screen ip ipv6-extension-header-limit 5
set security screen ids-option external-screen ip ipv6-malformed-header
set security screen ids-option external-screen ip security-option
set security screen ids-option external-screen ip source-route-option
set security screen ids-option external-screen ip stream-option
set security screen ids-option external-screen ip strict-source-route-option
set security screen ids-option external-screen ip tear-drop
set security screen ids-option external-screen ip tunnel gre gre-4in4
set security screen ids-option external-screen ip tunnel gre gre-4in6
set security screen ids-option external-screen ip tunnel gre gre-6in4
set security screen ids-option external-screen ip tunnel gre gre-6in6
set security screen ids-option external-screen ip tunnel ip-in-udp teredo
set security screen ids-option external-screen ip tunnel ipip dslite
set security screen ids-option external-screen ip tunnel ipip ipip-4in4
set security screen ids-option external-screen ip tunnel ipip ipip-4in6
set security screen ids-option external-screen ip tunnel ipip ipip-6in4
set security screen ids-option external-screen ip tunnel ipip ipip-6in6
set security screen ids-option external-screen ip tunnel ipip ipip-6over4
set security screen ids-option external-screen ip tunnel ipip ipip-6to4relay
set security screen ids-option external-screen ip tunnel ipip isatap
set security screen ids-option external-screen ip unknown-protocol
set security screen ids-option external-screen limit-session source-ip-based 3000
set security screen ids-option external-screen tcp fin-no-ack
set security screen ids-option external-screen tcp land
set security screen ids-option external-screen tcp port-scan threshold 200
set security screen ids-option external-screen tcp syn-fin
set security screen ids-option external-screen tcp syn-flood alarm-threshold 1500
set security screen ids-option external-screen tcp syn-flood attack-threshold 900
set security screen ids-option external-screen tcp syn-flood destination-threshold 2500
set security screen ids-option external-screen tcp syn-flood source-threshold 200
set security screen ids-option external-screen tcp syn-flood timeout 20
set security screen ids-option external-screen tcp syn-frag
set security screen ids-option external-screen tcp tcp-no-flag
set security screen ids-option external-screen tcp tcp-sweep threshold 200
set security screen ids-option external-screen tcp winnuke
set security screen ids-option external-screen udp flood threshold 1000
set security screen ids-option external-screen udp udp-sweep threshold 200
@jeremmfr
Copy link
Owner

Yes, it's possible, I'll take care of adding it

@jeremmfr jeremmfr self-assigned this Jan 22, 2021
@jeremmfr jeremmfr added the enhancement New feature or request label Jan 22, 2021
@jeremmfr jeremmfr linked a pull request Feb 3, 2021 that will close this issue
jeremmfr added a commit that referenced this issue Feb 3, 2021
Fixes #92: Add support for Juniper Screen & more
@jeremmfr jeremmfr added this to the v1.13.0 milestone Dec 7, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants